NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-48939
Summary

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Publication Date June 20, 2026, 10:16 p.m.
Registration Date June 27, 2026, 4:07 a.m.
Last Update June 25, 2026, 2:16 p.m.
Related information, measures and tools
Common Vulnerabilities List